The following Fedora 34 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a3703b9dc8
skopeo-1.2.3-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0414eb891b
ansible-2.9.20-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ba275e4102
java-latest-openjdk-16.0.1.0.9-1.rolling.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5e10ad8c19
libmicrohttpd-0.9.73-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f001ba18b
pngcheck-3.0.3-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-de850ed71e
perl-Image-ExifTool-12.16-3.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5214bd8f14
axel-2.17.10-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f41d5fc954
python-yara-4.1.0-1.fc34 yara-4.1.0-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a0e07ee1ae php-7.4.18-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3fb798ea36 babel-2.9.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-10d7331a31
exiv2-0.27.3-6.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
30
https://bodhi.fedoraproject.org/updates/FEDORA-2021-57d5006b63
annobin-9.65-3.fc34
22
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
21
https://bodhi.fedoraproject.org/updates/FEDORA-2021-430f7a8613
createrepo_c-0.17.1-1.fc34
14
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3ba25c9c2d exo-4.16.2-1.fc34
xfce4-settings-4.16.1-1.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-13846a3738
xkeyboard-config-2.32-3.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e97353291b
mtools-4.0.27-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8d26207af7
selinux-policy-34.4-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7c3322c978
qt5-qtwayland-5.15.2-6.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e55875a8f6 lorax-34.10-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7a5e973e38
kernel-5.11.17-300.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aa7ad6f57f
iptables-1.8.7-7.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-46873b3b46
libgcrypt-1.9.3-2.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-70ad741004
libwacom-1.10-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7140d9a58f gcc-11.1.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-10d7331a31
exiv2-0.27.3-6.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0c8d57297a
uboot-tools-2021.04-3.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-03756cf274
pipewire-0.3.26-4.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6348d6bf2c fedora-repos-34-2
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8ed7d6d0a0 pungi-4.2.9-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
R-microbats-0.1.1-1.fc34
R-pbapply-1.4.3-1.fc34
breeze-icon-theme-5.81.0-3.fc34
ddiskit-3.6-11.1.20191129gitde1f684.fc34
duplicity-0.8.19-1.fc34
fedora-logos-34.0.3-1.fc34
gap-pkg-fr-2.4.7-1.fc34
glfw-3.3.4-1.fc34
gsm-1.0.19-5.fc34
ibus-typing-booster-2.11.4-1.fc34
la-capitaine-icon-theme-0.6.2-1.fc34
mesa-21.0.3-2.fc34
opendmarc-1.4.0-1.fc34
prosody-0.11.8-4.fc34
rust-bincode-1.3.3-1.fc34
rust-cast-0.2.5-1.fc34
rust-crossbeam-channel-0.5.1-1.fc34
rust-crossbeam-utils-0.8.4-1.fc34
rust-ctrlc-3.1.9-1.fc34
rust-deunicode-1.2.1-1.fc34
rust-id_tree-1.8.0-1.fc34
rust-predicates-1.0.8-1.fc34
rust-psutil-3.2.1-1.fc34
rust-tokio-util-0.6.6-1.fc34
siege-4.0.9-1.fc34
starcal-3.1.11-1.fc34
Details about builds:
================================================================================
R-microbats-0.1.1-1.fc34 (FEDORA-2021-13edafa73d)
An implementation of Bat Algorithm in R
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953976 - Review Request: R-microbats - An implementation of Bat Algorithm in
R
https://bugzilla.redhat.com/show_bug.cgi?id=1953976
--------------------------------------------------------------------------------
================================================================================
R-pbapply-1.4.3-1.fc34 (FEDORA-2021-a8e741e2d5)
Adding Progress Bar to '*apply' Functions
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953741 - Review Request: R-pbapply - Adding Progress Bar to '*apply'
Functions
https://bugzilla.redhat.com/show_bug.cgi?id=1953741
--------------------------------------------------------------------------------
================================================================================
breeze-icon-theme-5.81.0-3.fc34 (FEDORA-2021-45b115b1bb)
Breeze icon theme
--------------------------------------------------------------------------------
Update Information:
Breeze-icon-themes now uses fedora logos from fedora-logos (instead of upstream
bundled (and outdated) files).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Tom Callaway <spot(a)fedoraproject.org> - 5.81.0-3
- use fedora logo image from fedora-logos (not upstream copy)
* Fri Apr 9 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 5.81.0-2
- respin
* Tue Apr 6 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 5.81.0-1
- 5.81.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1952518 - Instal to hard drive logo on kde spin is old one and not the new
https://bugzilla.redhat.com/show_bug.cgi?id=1952518
--------------------------------------------------------------------------------
================================================================================
ddiskit-3.6-11.1.20191129gitde1f684.fc34 (FEDORA-2021-6e39f13df8)
Tool for Red Hat Enterprise Linux Driver Update Disk creation
--------------------------------------------------------------------------------
Update Information:
- Change "Requires: genisoimage" dependency to "Requires:
/usr/bin/mkisofs" to
enable xorriso-provided drop-in replacement implementation usage.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Eugene Syromiatnikov <esyr(a)redhat.com> - 3.6-11.1
- Change "Requires: genisoimage" dependency to "Requires:
/usr/bin/mkisofs"
to enable xorriso-provided drop-in replacement implementation usage.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Oct 14 2020 Cestmir Kalina <ckalina(a)redhat.com> - 3.6-10
- Remove Python 2 relevant chunks
- Fixes #1885256
--------------------------------------------------------------------------------
================================================================================
duplicity-0.8.19-1.fc34 (FEDORA-2021-89804507e9)
Encrypted bandwidth-efficient backup using rsync algorithm
--------------------------------------------------------------------------------
Update Information:
0.8.19
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 0.8.19-1
- 0.8.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1955291 - duplicity-0.8.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1955291
--------------------------------------------------------------------------------
================================================================================
fedora-logos-34.0.3-1.fc34 (FEDORA-2021-45b115b1bb)
Fedora-related icons and pictures
--------------------------------------------------------------------------------
Update Information:
Breeze-icon-themes now uses fedora logos from fedora-logos (instead of upstream
bundled (and outdated) files).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Tom Callaway <spot(a)fedoraproject.org> - 34.0.3-1
- add logo file that breeze-icon-theme needs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1952518 - Instal to hard drive logo on kde spin is old one and not the new
https://bugzilla.redhat.com/show_bug.cgi?id=1952518
--------------------------------------------------------------------------------
================================================================================
gap-pkg-fr-2.4.7-1.fc34 (FEDORA-2021-485e41a3f8)
Computations with functionally recursive groups
--------------------------------------------------------------------------------
Update Information:
Changes in version 2.4.7: - `Use InstallMethodWithRandomSource`. Also replace
inefficient calls like `Random([1..5])` by more efficient `Random(1, 5)` resp.
`Random(rs, 1, 5)` (which avoids the overhead of creating an intermediate range
object. - Removed extra argument from `InstallGlobalFunction`. - Changed
`IsLevelTransitive` to `IsLevelTransitiveFRGroup` / ...`FRElement`; made code
smarter to check (partial) recurrence. - PackageInfo.g: add License field. -
Added ideal for Grigorchuk thinned algebra. Added jupyter support (hack). -
Version push, fix trivial bugs. - Fixed annoying bug with alphabets stopping
being ranges
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Jerry James <loganjerry(a)gmail.com> - 2.4.7-1
- Version 2.4.7
- Drop -noassert patch, underlying issue fixed upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1955200 - gap-pkg-fr-2.4.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1955200
--------------------------------------------------------------------------------
================================================================================
glfw-3.3.4-1.fc34 (FEDORA-2021-29e3e3bc60)
A cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Till Hofmann <thofmann(a)fedoraproject.org> - 1:3.3.4-1
- Update to 3.3.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1896418 - glfw doesn't properly set window size in full screen mode on
Wayland
https://bugzilla.redhat.com/show_bug.cgi?id=1896418
[ 2 ] Bug #1931933 - glfw-3.3.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1931933
[ 3 ] Bug #1954570 - OpenGL application doesn't run properly on X11/Wayland v2.0
https://bugzilla.redhat.com/show_bug.cgi?id=1954570
--------------------------------------------------------------------------------
================================================================================
gsm-1.0.19-5.fc34 (FEDORA-2021-dfecd90b8d)
Shared libraries for GSM speech compressor
--------------------------------------------------------------------------------
Update Information:
This is an update fixing soname.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 1.0.19-5
- Updated soname
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.11.4-1.fc34 (FEDORA-2021-ba329e760f)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.11.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Mike FABIAN <mfabian(a)redhat.com> - 2.11.4-1
- Update to 2.11.4
- In main.py ���import factory��� only when the --xml option is not used
Resolves: rhbz#1711646
- Limit the ���capitalize��� case mode used in auto-capitalization to the
first index in a string
Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/167
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1711646 - Scriptlet error when updating through SSH
https://bugzilla.redhat.com/show_bug.cgi?id=1711646
--------------------------------------------------------------------------------
================================================================================
la-capitaine-icon-theme-0.6.2-1.fc34 (FEDORA-2021-0335650773)
Icon pack designed to integrate with most desktop environments
--------------------------------------------------------------------------------
Update Information:
Update to latest version ---- Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 25 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.6.2-1
- build(update): 0.6.2
* Sat Apr 24 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0.6.1-12.20210424gitd49ef94
- build(update): d49ef94 commit
--------------------------------------------------------------------------------
================================================================================
mesa-21.0.3-2.fc34 (FEDORA-2021-0abaa1415c)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
This update backports a fix for amdgpu graphics corruption regression. See
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c6113a5a8a and
https://gitlab.freedesktop.org/mesa/mesa/-/issues/4691 for details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Kalev Lember <klember(a)redhat.com> - 21.0.3-2
- Backport a fix for amdgpu graphics corruption regression
--------------------------------------------------------------------------------
================================================================================
opendmarc-1.4.0-1.fc34 (FEDORA-2021-c1b846164e)
A Domain-based Message Authentication, Reporting & Conformance (DMARC) milter and
library
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.4.0. Fixes bugs and security issues ( CVE-2020-12460) This is a
major rework of the spec file, so please do test heavily!
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 24 2021 Kevin Fenzi <kevin(a)scrye.com> - 1.4.0-1
- Update to 1.4.0 and clean up spec.
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.3.2-6
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1861844 - request version bump to "current", still really old,
opendmarc master, for F32/F32
https://bugzilla.redhat.com/show_bug.cgi?id=1861844
[ 2 ] Bug #1861992 - CVE-2020-12460 opendmarc: improper null termination in function
opendmarc_xml_parse leads to heap-buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1861992
[ 3 ] Bug #1888031 - Permissions too restrictive on /var/run/opendmarc
https://bugzilla.redhat.com/show_bug.cgi?id=1888031
[ 4 ] Bug #1915468 - /usr/lib/systemd/system/opendmarc.service:8: PIDFile= references a
path below legacy directory /var/run/, updating /var/run/opendmarc/opendmarc.pid ���
/run/opendmarc/opendmarc.pid; please update the unit file accordingly.
https://bugzilla.redhat.com/show_bug.cgi?id=1915468
--------------------------------------------------------------------------------
================================================================================
prosody-0.11.8-4.fc34 (FEDORA-2021-aef3ad6c18)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Added upstream patch to avoid `-Wl,--as-needed` removing linking to `libpthread`
when building with current `libicu` (#1954178)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 Robert Scheck <robert(a)fedoraproject.org> 0.11.8-4
- Added upstream patch to avoid '-Wl,--as-needed' removing linking
to libpthread when building with current libicu (#1954178)
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.11.8-3
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1954178 - Prosody fails to start (due to libicu)
https://bugzilla.redhat.com/show_bug.cgi?id=1954178
--------------------------------------------------------------------------------
================================================================================
rust-bincode-1.3.3-1.fc34 (FEDORA-2021-217cd39d86)
Binary serialization / deserialization strategy that uses Serde
--------------------------------------------------------------------------------
Update Information:
Update to version 1.3.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.3.3-1
- Update to version 1.3.3.
- Fixes RHBZ#1948155
--------------------------------------------------------------------------------
================================================================================
rust-cast-0.2.5-1.fc34 (FEDORA-2021-a1c2c21a1b)
Ergonomic, checked cast functions for primitive types
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.5.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.5-1
- Update to version 0.2.5.
- Fixes RHBZ#1948309
--------------------------------------------------------------------------------
================================================================================
rust-crossbeam-channel-0.5.1-1.fc34 (FEDORA-2021-0f989fcb1b)
Multi-producer multi-consumer channels for message passing
--------------------------------------------------------------------------------
Update Information:
Update to version 0.5.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.1-1
- Update to version 0.5.1.
- Fixes RHBZ#1948206
--------------------------------------------------------------------------------
================================================================================
rust-crossbeam-utils-0.8.4-1.fc34 (FEDORA-2021-19cd808a2d)
Utilities for concurrent programming
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.4-1
- Update to version 0.8.4.
- Fixes RHBZ#1955264
--------------------------------------------------------------------------------
================================================================================
rust-ctrlc-3.1.9-1.fc34 (FEDORA-2021-dfecb1c80c)
Easy Ctrl-C handler for Rust projects
--------------------------------------------------------------------------------
Update Information:
Update to version 3.1.9.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 3.1.9-1
- Update to version 3.1.9.
- Fixes RHBZ#1949051
--------------------------------------------------------------------------------
================================================================================
rust-deunicode-1.2.1-1.fc34 (FEDORA-2021-298b7b4764)
Convert Unicode strings to pure ASCII by intelligently transliterating them
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.2.1-1
- Update to version 1.2.1.
- Fixes RHBZ#1948511
--------------------------------------------------------------------------------
================================================================================
rust-id_tree-1.8.0-1.fc34 (FEDORA-2021-9a557358eb)
Library for creating and modifying Tree structures
--------------------------------------------------------------------------------
Update Information:
Update to version 1.8.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.8.0-1
- Update to version 1.8.0.
- Fixes RHBZ#1949142
--------------------------------------------------------------------------------
================================================================================
rust-predicates-1.0.8-1.fc34 (FEDORA-2021-66e0ea1a68)
Implementation of boolean-valued predicate functions
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.8.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.8-1
- Update to version 1.0.8.
- Fixes RHBZ#1954841
--------------------------------------------------------------------------------
================================================================================
rust-psutil-3.2.1-1.fc34 (FEDORA-2021-16bb9dfcf8)
Process and system monitoring library
--------------------------------------------------------------------------------
Update Information:
Update to version 3.2.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 3.2.1-1
- Update to version 3.2.1.
- Fixes RHBZ#1948307
--------------------------------------------------------------------------------
================================================================================
rust-tokio-util-0.6.6-1.fc34 (FEDORA-2021-8716793286)
Additional utilities for working with Tokio
--------------------------------------------------------------------------------
Update Information:
Update to version 0.6.6.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.6-1
- Update to version 0.6.6.
- Fixes RHBZ#1948748
--------------------------------------------------------------------------------
================================================================================
siege-4.0.9-1.fc34 (FEDORA-2021-a447866630)
HTTP regression testing and benchmarking utility
--------------------------------------------------------------------------------
Update Information:
2021/04/17 Jeffrey Fulmer
http://www.joedog.org/support/ * src/cookie.c
Added NULL checks for getters * version.c Version increment: 4.0.9
2021/04/17 Vedran Miletic
https://github.com/vedranmiletic * src/main.c
Prettified json
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Denis Fateyev <denis(a)fateyev.com> - 4.0.9-1
- Update to 4.0.9 (#1950658)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950658 - siege-4.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1950658
--------------------------------------------------------------------------------
================================================================================
starcal-3.1.11-1.fc34 (FEDORA-2021-d865a8930d)
A full-featured international calendar written in Python
--------------------------------------------------------------------------------
Update Information:
Update to latest version, specially for Hijri calendar.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 29 2021 Hedayat Vatankhah <hedayat.fwd+rpmchlog(a)gmail.com> - 3.1.11-1
- Update calendar to latest version
--------------------------------------------------------------------------------